Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
When issuing a Scan() in poor reception while attached to an operator it's
fully possible to get no results, which causes the attached operator to be
cleaned up. In certain scenarios this would cause a use-after-free as there
are still references to this operator.
Transfer the attached operator to the new list regardless of removal caused
by the Scan() results.
|
|
This matches the behavior described by the documentation the signal
value returned by the code. This was causing a headache when using
stricter D-Bus wrappers like dbus-c++.
|
|
In situations where location changes rapidly, a use-after-free condition
can occur. What happens is that the timeout leaks and then the cbs
struct with the callback is cleaned up, resulting in a SIGSEGV when the
callback occurs from the glib loop.
|
|
In ofono_modem_reset, if the enable() callback fails, do not
proceed to the pre-sim state
|
|
|
|
|
|
When the voicecall atom is unregistered we remove all HFP support as
well but were supplying a zero as value to the emulator status
callbacks which caused the process to crash as we were dereferencing
the supplied value always and not respecting a zero as indicator to
reset.
|
|
|
|
|
|
|
|
Move enums for operator_status and packet_bearer to common.h to avoid
duplication in drivers.
|
|
|
|
When registering audio cards for the handsfree and gateway roles we
need a way for our users to differentiate between both to decide which
of them they start using for their purpose.
|
|
|
|
Do not check if the origin port is reserved, as some operators use that
range of values.
|
|
|
|
The kernel simply puts a null terminator at index 15 prior to ifr_name
processing. So we do the same.
Original report by:
Sabas Rosales, Blanca E <blanca.e.sabas.rosales@intel.com>
Buffer not null terminated (BUFFER_SIZE_WARNING) buffer_size_warning:
Calling strncpy with a maximum size argument of 16 bytes on destination
array ifr.ifr_ifrn.ifrn_name of size 16 bytes might leave the
destination string unterminated.
92 strncpy(ifr.ifr_name, interface, IFNAMSIZ);
|
|
|
|
|
|
|
|
|
|
ifdef away GNU libc extensions and use a POSIXly correct pointer type
|
|
Function: ag_features_list
static const char *list[10]; (Out of bounds write, line 75)
Incrementing i the value is now 10, for “hf-indicators”
Reported by: blanca.e.sabas.rosales@intel.com
|
|
|
|
Fixes property change not being emited when hot-swapping a
PIN-enabled card.
|
|
Fixes PinRequired not being emitted when a card is inserted
|
|
|
|
|
|
Add DBus method that removes the current contexts and re-provisions
using the APN database.
|
|
|
|
|
|
We make sure that after performing the UTF8 -> GSM conversion, the
number of GSM bytes is not greater than 11, which is the maximum
payload.
|
|
TP-OA max length comparisons were incorrect because TP-OA's 7-bit
coded octets transport eleven 8-bit chars. The current code assumed
only 10 chars were possible.
The patch
- increases the array size to 23, (maximum of 22 bytes for UTF8
encoding + null terminator)
- Updates the sanity check to account for the correct maximum
- For encoding, checks the maximum length in UTF8 characters instead of
bytes
|
|
|
|
Init allocates a SCO audio socket always. oFono should do that
with bluez5 but not with bluez4. This patch starts the refactoring of
the handsfree_audio_manager init/cleanup functionality.
|
|
Not all possible futures technologies were being showed on the DBus
interface.
|
|
If fast dormancy query is not implemented the available rats are not
queried.
|
|
|
|
Take advantage of the new enum structure to future proof and simplify
the logic of generating the AvailableTechnologies property
|
|
|
|
On some architectures the SimManager.Retries property was getting bogus
values. This is because we were sending an array which pointed to int
values instead of the expected unsigned char values.
This fix allocates a temporary array of unsigned chars to hold the
actual D-Bus values being sent. Additionally, the dictionary array is
changed to point to the temporary unsigned char based values instead of
the raw 'int' based retry values.
|
|
|
|
|
|
|
|
When we are simply updating the AG of HF indicator changes, do not try
to send a method return message.
|
|
|
|
|
|
Distracted Driving Reduction or Enhanced Safety is implemented using HF
indicator 0x0001
|
|
|